diff --git a/.woodpecker/db.yml b/.woodpecker/db.yml
index c5a87c9..95148aa 100644
--- a/.woodpecker/db.yml
+++ b/.woodpecker/db.yml
@@ -38,26 +38,21 @@ steps:
       - . ./ci/prod/.env.runtime
       - . ./.env.version
       - set +a
-      - mkdir -p /root/.ssh
-      - install -m 600 secrets/SSH_KEY /root/.ssh/id_rsa
+      - ': "${REMOTE_BASE:?missing REMOTE_BASE}"'
+      - ': "${DB_DIR:?missing DB_DIR}"'
+      - ': "${SSH_USER:?missing SSH_USER}"'
+      - ': "${SSH_HOST:?missing SSH_HOST}"'
       - SSH_OPTS='-i /root/.ssh/id_rsa -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -vv'
       - REMOTE_DIR="${REMOTE_BASE%/}/${DB_DIR}"
       - REMOTE_TARGET="${SSH_USER}@${SSH_HOST}"
-      # sync
       - ssh $SSH_OPTS "$REMOTE_TARGET" "mkdir -p ${REMOTE_DIR}/{compose,env}"
       - rsync -avz --delete -e "ssh $SSH_OPTS" ci/prod/compose/  "$REMOTE_TARGET:${REMOTE_DIR}/compose/"
       - rsync -avz             -e "ssh $SSH_OPTS" ci/prod/.env.runtime "$REMOTE_TARGET:${REMOTE_DIR}/env/.env.runtime"
-      # deploy on remote via heredoc
       - |
         ssh $SSH_OPTS "$REMOTE_TARGET" REMOTE_DIR="$REMOTE_DIR" bash -s <<'EOSSH'
         set -Eeuxo pipefail
         cd "${REMOTE_DIR}/compose"
-        set -a
-        . ../env/.env.runtime
-        set +a
-        docker compose -f db.yml pull
-        docker compose -f db.yml up -d --remove-orphans
-        docker compose ps
-        date -Is | tee .last_deploy
-        logger -t deploy-db "db deployed at $(date -Is) in ${REMOTE_DIR}"
+        ...
         EOSSH
+
+